Wireless Web Privacy Problem

If you use your Sprint PCS cellular telephone to surf the Web, you're automatically giving your phone number to the websites you visit. The phone number give-away was discovered by a user trying to figure out how his service worked, and a programmer verified that it affects all Sprint PCS users. Other wireless Web providers may be doing the same thing, though Bell Atlantic and AirTouch Communications say they've stopped that from occurring in their services.

The problem is based on the “microbrowser” these services use, written by Phone.com, which requires the cell phone to use a unique ID number to see the webpages converted to the tiny screens. While companies like Bell Atlantic and AirTouch change the numbers, Sprint (and possibly others) just uses the cell phone number as the ID.

The privacy ramifications of this are widespread: websites could contact cell phone visitors by phone to follow-up on potential sales, etc.; users and their browsing/buying habits can be identified and tracked; and websites could give out the phone numbers to spammers and other unwanted marketers.

SAM'S OPINION
I don't want to downplay the seriousness of this privacy violation and the taint it puts on the burgeoning wireless surfing market (which I endorse–the market, not the taint), but the article has some great, ridiculous quotes from phone company execs trying to justify this. A Sprint spokesman says it's no big deal, since people give this and more information out to websites all the time when they buy things. Can you say “miss the point?” The whole problem is that the phone number is being given away automatically to every site. An AT&T spokesman says it's not an issue with their service because no one has complained. Ditto on the “miss the point” for that guy. The number give-away happens behind-the-scenes and users wouldn't know about it. Duh.

What is particularly galling about the reaction of these companies is that the fix is incredibly easy. Just change the number or send out a random number (AirTouch does that). Privacy has always been a big issue on the Web and the 'Net, and if surfing by cell phone is going to take off, these companies better implement these easy fixes to assuage people's fear. Cell phone surfing isn't huge here in the U.S. yet, but it could definitely get that way quickly as more and more Americans get cell phones every day.

Can you imagine what a nightmare it would be if you started getting calls from salespeople at websites you'd visited or SMS (instant phone messages) text from spammers, all being charged to you as in incoming call? Wake up, Sprint, and make the change now!!

UPDATE March 8, 6:15 P.M. ESTThe SF Gate has a new article stating that Sprint will change its policy on this issue for the next version of the software. AT&T also admitted that it gives out the phone numbers, but still isn't planning to change that fact. One out of two is still bad! Come on, AT&T, get with the program!